// Data Protection & Privacy
wwwck Privacy Policy
At wwwck, protecting the personal data of our players across Bangladesh is a core responsibility — not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used and stored, and the rights you hold over your own data.
// Section 01
Information We Collect
When you register an account with wwwck, use our platform, or contact our support team, we collect certain categories of personal data. This collection is necessary to provide you with a secure, compliant, and functional gambling experience. We collect only the data we genuinely need — we do not gather information speculatively or beyond what serves a defined operational or legal purpose.
Account Registration Data: When you create a wwwck account, we collect your full legal name, date of birth, residential address in Bangladesh, email address, mobile phone number, and a username and password of your choosing. This data is required to open your account, verify your age (18+), and maintain your player profile.
Identity Verification (KYC) Data: To comply with anti-money laundering (AML) obligations and to confirm that players are aged 18 or above, wwwck requires identity verification for withdrawal processing above ৳10,000 and in other risk-triggered scenarios. Documents accepted include the Bangladesh National Identity Card (NID), passport, and driving licence. We also collect a selfie or short video for liveness verification where required. These documents are transmitted over encrypted channels and stored in a secure, access-controlled document vault.
Financial Transaction Data: We collect records of every deposit and withdrawal you make on the platform, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), the amount in Bangladeshi Taka (৳), the transaction reference number, and the timestamp. This data is essential for processing payments, resolving disputes, detecting fraud, and maintaining accurate financial records.
Gameplay and Betting Data: We record your in-platform activity, including the games you play, bets placed, wager amounts, game outcomes, session durations, and bonus usage. This data is used for responsible gaming monitoring, platform analytics, dispute resolution, and ensuring fair play compliance across all game providers.
Device and Technical Data: When you access wwwck, our servers automatically log your IP address, device type and operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data supports fraud detection, security monitoring, and platform performance optimisation.
Communications Data: If you contact our support team via live chat or email, we retain records of those communications including the content of messages, timestamps, and resolution outcomes. This data is used for quality assurance, dispute evidence, and improving our support services.
- Identity: Name, DOB, NID, address
- Contact: Mobile, email
- Financial: Transaction records, payment methods
- Gameplay: Bets, sessions, outcomes
- Technical: IP address, device, browser
- Communications: Support chat and email records
wwwck does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond liveness checks required for KYC compliance.
// Section 02
How We Use Your Data
Every use of your personal data by wwwck is grounded in a specific lawful basis. We rely on the following legal bases for processing: contractual necessity (to fulfil our obligations to you as a player), legitimate interests (to operate the platform securely and improve our services), legal obligation (to comply with AML, KYC, and other regulatory requirements), and your consent (for optional marketing communications).
Account Management and Service Delivery: We use your registration and contact data to create and maintain your player account, authenticate your logins, process deposits and withdrawals, deliver bonuses and promotional rewards, and communicate important account-related updates. This processing is necessary to fulfil the service agreement between you and wwwck.
Identity Verification and Fraud Prevention: Your KYC documents and transaction data are used to verify your identity, confirm your age (18+), detect and prevent fraudulent account activity, identify money laundering patterns, and comply with our obligations under applicable AML frameworks. This processing is legally required and cannot be opted out of.
Responsible Gaming Monitoring: Gameplay and betting data is analysed to identify indicators of problem gambling behaviour — such as rapid loss chasing, dramatic increases in deposit frequency, or significant deviations from a player's baseline activity patterns. Where such indicators are detected, our responsible gaming team may reach out proactively. This processing is a core part of our duty of care to players.
Customer Support: Communications data is used to respond to your enquiries, investigate and resolve complaints, maintain records for dispute resolution purposes, and improve the quality of our support services over time.
Platform Analytics and Improvement: Aggregated and anonymised gameplay, technical, and behavioural data is used to analyse platform performance, identify bugs, improve game recommendations, optimise the user experience, and make informed product development decisions. Analytics data is anonymised before analysis and cannot be used to identify individual players.
Marketing Communications (Consent-Based): With your explicit consent, we may use your email address and mobile number to send promotional offers, bonus notifications, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season campaigns), and platform news. You may withdraw consent for marketing communications at any time through your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform.
| Purpose | Basis |
|---|---|
| Account management | Contract |
| Payment processing | Contract |
| KYC / AML checks | Legal obligation |
| Fraud prevention | Legitimate interest |
| Responsible gaming | Legitimate interest |
| Support records | Legitimate interest |
| Platform analytics | Legitimate interest |
| Marketing emails | Consent |
// Section 03
Data Sharing & Third Parties
wwwck does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. We share your data only with carefully vetted partners and service providers whose involvement is necessary to deliver the wwwck platform, and only to the minimum extent required for each partner's specific function.
Game Technology Providers: To deliver our casino games and sports betting markets, we work with licensed game studios and platform providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive the minimum account-level data necessary to authenticate your session and record game outcomes. They do not receive your full identity documents or payment method details.
Payment Processing Partners: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your transaction data is transmitted to the relevant payment network to authorise and settle the transaction. Each payment provider operates under its own privacy policy and is bound by applicable financial data protection regulations. wwwck does not store your full card numbers or mobile banking PINs.
Identity Verification Services: We use third-party KYC and AML screening services to process identity documents, conduct liveness checks, and screen against sanctions and politically exposed persons (PEP) lists. These providers are contractually bound to use your data solely for verification purposes and to delete documents within agreed retention windows.
Cloud Infrastructure and Security Providers: Our platform is hosted on enterprise-grade cloud infrastructure. Server-level data storage, backup, and security monitoring are handled by contracted infrastructure partners who operate under strict data processing agreements and are prohibited from accessing player data for their own purposes.
Legal Disclosure: We may disclose your personal data to government authorities, law enforcement agencies, or financial intelligence units where we are legally compelled to do so — for example, in response to a valid court order, a regulatory investigation, or our mandatory AML reporting obligations. We will notify you of such disclosures where legally permitted to do so.
- Game providers — session authentication only
- Payment networks — transaction settlement
- KYC services — identity & age verification
- Cloud/infra providers — secure hosting
- Authorities — legal obligation only
Advertisers, data brokers, social media platforms, or any party for commercial marketing purposes.
// Section 05
Data Security Measures
Protecting the personal and financial data of wwwck players is a technical and organisational priority. We implement a layered security architecture designed to defend against unauthorised access, data breaches, and malicious attacks. The following describes the key measures in place.
Encryption in Transit and at Rest: All data transmitted between your device and wwwck servers is encrypted using TLS 1.3 with 256-bit AES encryption. Data stored on our servers — including personal information, KYC documents, and financial records — is encrypted at rest using AES-256. Encryption keys are rotated on a scheduled basis and stored separately from the data they protect.
Access Control and Authentication: Internal access to player data is restricted to authorised personnel on a strict need-to-know basis. All staff access is governed by role-based access controls (RBAC). Multi-factor authentication (MFA) is mandatory for all staff accounts with access to production systems containing player data. Every access event is logged and retained for audit purposes.
Intrusion Detection and Monitoring: Our infrastructure is monitored 24/7 by automated intrusion detection systems (IDS) that alert our security team to anomalous activity patterns. Regular penetration testing is conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
Data Breach Response: In the event of a confirmed data breach affecting player personal information, wwwck will notify affected players via their registered email address within 72 hours of becoming aware of the incident. The notification will describe the nature of the breach, the categories of data affected, the steps we have taken to contain it, and the actions we recommend you take to protect yourself.
- TLS 1.3 + AES-256 encryption in transit
- AES-256 encryption at rest
- Role-based access control (RBAC)
- Mandatory MFA for staff systems
- 24/7 automated intrusion detection
- Regular independent penetration testing
- 72-hour breach notification protocol
// Section 06
Data Retention Policy
wwwck retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When data is no longer needed and no retention obligation applies, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
Active Account Data: While your account is active, we retain all registration, KYC, transaction, and gameplay data associated with it. This data is necessary to provide you with uninterrupted access to the platform and to comply with ongoing AML monitoring obligations.
Post-Closure Retention: Following account closure — whether voluntary or initiated by wwwck — we retain your identity and transaction records for a minimum of five (5) years. This retention period reflects our obligations under international AML frameworks and our need to maintain records for potential dispute resolution or regulatory enquiry. After the five-year period, data is securely deleted unless a specific legal hold is in place.
KYC Documents: Identity verification documents are retained for the same five-year minimum period post-closure. Original document images are purged after this period; anonymised records confirming that verification was completed may be retained longer for audit trail purposes.
Support Communications: Records of support conversations — including live chat transcripts and email threads — are retained for three (3) years following the closure of each support ticket. This retention supports dispute resolution and quality assurance.
Marketing Data: If you have consented to marketing communications and subsequently withdraw that consent, your contact details will be removed from active marketing lists within 30 days. A suppression record (containing only the fact that you opted out, not your full profile) is retained indefinitely to prevent accidental re-addition to marketing lists.
| Data Type | Retention Period |
|---|---|
| Account & KYC records | 5 years post-closure |
| Transaction records | 5 years post-closure |
| Gameplay logs | 5 years post-closure |
| Support chat / email | 3 years post-ticket |
| Analytics (anonymised) | Indefinite (no PII) |
| Marketing consent records | Until opt-out + 30 days |
| Suppression records | Indefinite (opt-out flag) |
// Section 07
Your Privacy Rights
As a wwwck player, you hold a meaningful set of rights over your personal data. We are committed to honouring these rights promptly and without unnecessary barriers. All rights requests should be submitted to [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 5 business days and complete it within 30 days. For complex requests, this period may be extended by a further 30 days with prior notice.
// Section 08
Policy Updates & Contact
wwwck reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or platform capabilities. When material changes are made, we will notify active players via their registered email address at least 14 days before the revised policy takes effect. Continued use of the platform after that date constitutes acceptance of the updated policy.
Minor Updates: For non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of our data practices, or updates to contact details — we will update the policy and revise the effective date without sending a proactive email notification. The current version of the policy is always available at wwwck.app/privacy-policy.
Version History: wwwck maintains a version history of this Privacy Policy. If you wish to review a prior version — for example, to understand what policy was in effect during a specific period — you may request it by emailing [email protected] with the subject line "Privacy Policy Version Request".
Contact Our Data Protection Team: All privacy-related enquiries, rights requests, and complaints should be directed to our dedicated data protection contact point. We are committed to responding to all privacy enquiries within 5 business days and resolving substantive complaints within 30 days.
If you are not satisfied with our response to a privacy complaint, you retain the right to escalate the matter through appropriate legal channels in your jurisdiction. We encourage players to contact us first so we have the opportunity to resolve concerns directly and promptly.
- Effective: 01 January 2026
- Version: 3.1
- Material change notice: 14 days via email
- Rights response time: Within 30 days
- Support hours: 24/7 live chat
- Time zone: BST (UTC+6)
For all data protection enquiries, rights requests, and privacy complaints:
Email: [email protected]
Response: within 5 business days
// Continue Exploring wwwck
Privacy Covered. Ready to Play?
Now that you understand how wwwck protects your data, explore our games, read our Terms & Conditions, or visit Responsible Gaming for player safety tools. 18+ only. Play responsibly.